CVE-2021-25105

The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-25105

The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-25105

The CVE-2021-25105 entry concerns the WordPress Ivory Search plugin prior to version 5.4.1, where Form settings are not properly escaped, enabling stored XSS by high-privilege users even when unfiltered_html is disallowed. Affected component: Ivory Search’s admin form handling (Form settings). Do...